Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Run codecov in required mode so it exits with non-zero on failure (#5073) | Alex Gaynor | 2019-11-25 | 1 | -1/+2 | |
| | ||||||
* | Fixes #5065 -- skip serialization tests which use RC2 if OpenSSL doesn't ↵ | Alex Gaynor | 2019-11-25 | 3 | -11/+36 | |
| | | | | | | | | have RC2 (#5072) * Refs #5065 -- have a CI job with OpenSSL built with no-rc2 * Fixes #5065 -- skip serialization tests which use RC2 if OpenSSL doesn't have RC2 | |||||
* | Skip coverage uploads on pypy3-nocoverage builds (#5074) | Alex Gaynor | 2019-11-25 | 1 | -0/+1 | |
| | ||||||
* | issue-5041: do not add extra flags when compiler or platform does not ↵ | Michael Felt | 2019-11-24 | 1 | -1/+13 | |
| | | | | | | | | | | | | | | support them (#5042) * check for suitable compiler (platform) before adding special flags * pep8 corrections * later pep8 messages * add clang to auto accepted compilers * modify syntax so multi-line is accepted | |||||
* | add SSL_get_verify_result (#5071) | Maximilian Hils | 2019-11-23 | 1 | -0/+1 | |
| | ||||||
* | add SSL_CTX_get0_param (#5070) | Maximilian Hils | 2019-11-22 | 2 | -0/+3 | |
| | ||||||
* | Added a test vector of an OCSP response with SCT extension (#5066) | Alex Gaynor | 2019-11-16 | 2 | -0/+2 | |
| | ||||||
* | add SSL[_CTX]_clear_mode (#5062) | Maximilian Hils | 2019-11-11 | 1 | -0/+2 | |
| | ||||||
* | Windows Installation: fix link to binaries (#5061) | Maximilian Hils | 2019-11-11 | 1 | -7/+6 | |
| | | | | | | | | | | * Windows Installation: fix link to binaries While https://github.com/pyca/infra/tree/master/windows/openssl points a trusted source (which would be preferable), pyca/infra currently does not provide any Windows binaries for download. Linking to the official OpenSSL wiki seems to be a reasonable compromise. * fix whitespace | |||||
* | Parse single_extensions in OCSP responses (#5059) | Paul Kehrer | 2019-11-11 | 8 | -1/+48 | |
| | | | | | | | | | | | | * add single_extensions to OCSPResponse (#4753) * new vector, updateed docs, more stringent parser, changelog, etc * simplify PR (no SCT for now) * add a comment * finish pulling out the sct stuff so tests might actually run | |||||
* | Fixes #4699 -- document that UnrecognizedExtension can be used in generation ↵ | Alex Gaynor | 2019-11-11 | 1 | -1/+3 | |
| | | | | (#5057) | |||||
* | Fixed #4377 -- document certificate policies with an example (#5058) | Alex Gaynor | 2019-11-11 | 1 | -0/+12 | |
| | ||||||
* | Fixed #5050 -- dropped support for an old LibresSSL release (#5056) | Alex Gaynor | 2019-11-11 | 10 | -16/+12 | |
| | | | | | | * Fixed #5050 -- dropped support for an old LibresSSL release * Changelog | |||||
* | Retry failed code coverage uploads (#5054) | Alex Gaynor | 2019-11-11 | 1 | -1/+1 | |
| | ||||||
* | Run py3.8 as our py3 in macOS CI (#5032) | Alex Gaynor | 2019-11-11 | 1 | -6/+6 | |
| | ||||||
* | Let Oid enforce positive decimal integers (#5053) | Noel Remy | 2019-11-10 | 2 | -1/+45 | |
| | | | | | | Failing that would lead to an OpenSSL error when calling OBJ_txt2obj at serialization. Adds basic tests for oids. | |||||
* | issue-5039: added documentation for curve attribute on EllipticCurveP… (#5045) | jschmidtlein | 2019-11-04 | 1 | -0/+6 | |
| | | | | | | * issue-5039: added documentation for curve attribute on EllipticCurvePrivateKey based on existing docs * issue-5039: changed indentation | |||||
* | Stop testing 2.7 on fedora (#5052) | Alex Gaynor | 2019-11-05 | 1 | -3/+0 | |
| | ||||||
* | Deal with the 2.5 deprecations (#5048) | Alex Gaynor | 2019-11-03 | 7 | -27/+11 | |
| | | | | | | | | | | | | * Deal with the 2.5 deprecations * pep8 + test fixes * docs typo * Why did I do this? * typo | |||||
* | Fixed link for linkcheck (#5047) | Alex Gaynor | 2019-11-01 | 1 | -1/+1 | |
| | ||||||
* | Add a comment so we can easily find a place to update later (#5043) | Alex Gaynor | 2019-11-01 | 1 | -0/+1 | |
| | | | | | | * Add a comment so we can easily find a place to update later * flake8 | |||||
* | Don't bother computing y coefficient in _modinv (#5037) | Clayton Smith | 2019-10-29 | 1 | -3/+3 | |
| | ||||||
* | Silence unguarded availability warnings for `getentropy` when targeting ↵ | Max Bélanger | 2019-10-24 | 1 | -1/+5 | |
| | | | | | | | | macOS 10.12 (#5019) * silence `Wunguarded-availability` when building with a `MACOSX_DEPLOYMENT_TARGET < 10.12` * use `__builtin_available` rather than a `NULL` echo upon init on mac | |||||
* | fix copy pasta in example snippet (#5033) | Ofek Lev | 2019-10-23 | 1 | -2/+1 | |
| | ||||||
* | Use 3.8 in CI where we want 'the latest 3.x' (#5021) | Alex Gaynor | 2019-10-20 | 1 | -21/+21 | |
| | | | | | | * Use 3.8 in CI where we want 'the latest 3.x' * Revert macOS changes for now | |||||
* | Test against libressl 3.0 (#5031) | Alex Gaynor | 2019-10-20 | 2 | -2/+4 | |
| | | | | | | * Test against libressl 3.0 * Correctly type these ints | |||||
* | Fix documentation of AuthorityKeyIdentifier.authority_cert_issuer. (#5001) | Felix Fontein | 2019-10-19 | 1 | -1/+1 | |
| | ||||||
* | Move `backend` argument in Scrypt documentation (#5027) | Jeremy Lainé | 2019-10-18 | 1 | -3/+2 | |
| | | | | Move the `backend` argument up with the rest of the constructor arguments, otherwise it's easy to miss it. | |||||
* | Correctly document `backend` argument of KBKDFHMAC (#5026) | Jeremy Lainé | 2019-10-18 | 1 | -2/+2 | |
| | | | | The documentation states that `backend` should be a `HashBackend` instance when in fact it should be a `HMACBackend` instance. | |||||
* | Fixes #5018 -- break users on OpenSSL 1.0.1 (#5022) | Alex Gaynor | 2019-10-18 | 6 | -9/+47 | |
| | | | | | | | | | | | | * Fixes #5018 -- break users on OpenSSL 1.0.1 * Grammar * Syntax error * Missing import * Missing import | |||||
* | reopen master for the 2.9 release (#5017) | Paul Kehrer | 2019-10-17 | 3 | -3/+10 | |
| | ||||||
* | Bump versions for 2.8 release (#5014) | Alex Gaynor | 2019-10-17 | 3 | -8/+6 | |
| | ||||||
* | Don’t downgrade pip on windows wheel building (#5015) | Paul Kehrer | 2019-10-17 | 1 | -4/+3 | |
| | | | | | | | | * Don’t downgrade pip on windows wheel building * Conditionally install enum34 * Syntax | |||||
* | Comply with PEP 508 by using platform_python_implementation (#5006) | Sebastian Jordan | 2019-10-17 | 1 | -1/+1 | |
| | ||||||
* | UniversalString needs to be encoded as UCS-4 (#5000) | Marko Kreen | 2019-10-17 | 2 | -0/+19 | |
| | ||||||
* | Fixes #5010 -- test and build 3.8 wheels (#5013) | Alex Gaynor | 2019-10-17 | 6 | -1/+30 | |
| | | | | | | * Fixes #5010 -- test and build 3.8 wheels * try using isolated_build = True to work around a failure | |||||
* | update openssls (#4995) | Paul Kehrer | 2019-10-15 | 3 | -11/+25 | |
| | | | | | | | | | | * update openssls * missed one * what will this do * only do this check for 1.1.0+ | |||||
* | update our test to be more robust wrt some changes from upstream (#4993) | Paul Kehrer | 2019-09-11 | 1 | -2/+9 | |
| | ||||||
* | Simplify implementing sequence methods (#4987) | Alex Gaynor | 2019-09-10 | 1 | -94/+31 | |
| | | | | | | * Simplify implementing sequence methods * flake8 | |||||
* | update libressl and pypy2.7 and pypy3.5 (#4989) | Paul Kehrer | 2019-09-09 | 1 | -3/+5 | |
| | | | | | | | | | | * update libressl and pypy2.7 and pypy3.5 * okay can't get 7.1, let's try to at least do 7.0 * 7.1.1 does actually exist * also an empty commit to appease the codecov gods | |||||
* | we're done here (#4991) | Paul Kehrer | 2019-09-09 | 1 | -0/+2 | |
| | ||||||
* | it's called FIPS_mode_set, not FIPS_set_mode (#4988) | Paul Kehrer | 2019-09-09 | 1 | -1/+1 | |
| | ||||||
* | one more missing branch (#4992) | Paul Kehrer | 2019-09-09 | 1 | -0/+23 | |
| | ||||||
* | fix coverage, small cleanups in tests (#4990) | Paul Kehrer | 2019-09-09 | 3 | -30/+40 | |
| | ||||||
* | Finish ed25519 and ed448 support in x509 module (#4972) | Marko Kreen | 2019-09-09 | 14 | -64/+662 | |
| | | | | | | | | | | | | | | | | | | * Support ed25519 in csr/crl creation * Tests for ed25519/x509 * Support ed448 in crt/csr/crl creation * Tests for ed448/x509 * Support ed25519/ed448 in OCSPResponseBuilder * Tests for eddsa in OCSPResponseBuilder * Builder check missing in create_x509_csr * Documentation update for ed25519+ed448 in x509 | |||||
* | be clear that NoEncryption must be an instance in the exception (#4985) | Paul Kehrer | 2019-09-07 | 4 | -4/+4 | |
| | ||||||
* | changelog addition for freshestcrl in CRLs (#4986) | Paul Kehrer | 2019-09-07 | 1 | -0/+2 | |
| | ||||||
* | Allow FreshestCRL extension in CRL (#4975) | Marko Kreen | 2019-09-07 | 3 | -0/+35 | |
| | | | Per RFC5280 it is allowed in both certificates and CRL-s. | |||||
* | fix coverage by adding two artificial DSA public keys (#4984) | Paul Kehrer | 2019-09-06 | 4 | -0/+37 | |
| | | | | | | | | | | * fix coverage by adding two artificial DSA public keys One key removes the optional parameters from the structure to cover a branch conditional, and the other key has its BITSTRING padding value set to a non-zero value. * lexicographic? never heard of it | |||||
* | Improve documentation for ECDSA sign and verify (#4970) | Harry Stern | 2019-08-16 | 1 | -6/+17 | |
| | | | | - Note that signatures are DER-encoded - Note that signatures can be encoded from r,s using util function |